Scammers create Blockworks clone site to drain crypto wallets
Sam Sniffer informed Cointelegraph the faked Blockworks and Decrypt websites are, nevertheless, run by different scammers.Magazine: Ethereum restaking– Blockchain innovation or hazardous house of cards?Update (Oct. 27, 1:30 am UTC): This short article has actually been upgraded with further details and remarks from Beosin and Scam Sniffer.
Phishing scammers have cloned the sites of crypto media outlet Blockworks and Ethereum blockchain scanner Etherscan to deceive unsuspecting readers into connecting their wallets to a crypto drainer.A fake Blockworks site displays a fake “BREAKING” report of a supposed multimillion-dollar “approvals make use of” on the decentralized exchange Uniswap and motivates users to a fabricated Etherscan site to rescind approvals. The fake Uniswap news short article was published on Reddit throughout a number of popular crypto-related subreddits by apparently jeopardized Reddit accounts.The fake Blockworks website (left) reveals a fake breaking newspaper article of a Uniswap exploit compared to the genuine website (right). The phony Etherscan website, which shows a purported token and wise contract approval checker, instead consists of a wallet drainer.Blockchain security firm Beosin examined the drainers wise contract and told Cointelegraph the attacker intends to drain wallets with at least 0.1 Ether (ETH), worth $180. Nevertheless, the drainer is improperly set up as “there is no phishing deal prompted after a wallet is linked.” The phishing website (left) compared to the genuine Etherscan website (right). Related: 85% of crypto rug draws in Q3 didnt report audits: HackenAn age check of the domains reveals the phony Etherscan website, approvalscan.io, was signed up on Oct. 25 and the fabricated Blockworks site, blockworks.media, was registered a day later.In an Oct. 25 X (Twitter) post, Web3 anti-scam platform Scam Sniffer revealed that fraudsters had deployed a wallet drainer on a website cloning the crypto news outlet Decrypt.the victim signed Uniswap Permit2 destructive phishing signatures like this pic.twitter.com/NcXIotokwL— Scam Sniffer
Related Content
- 36% of the top 1,000 crypto projects went silent on blogging this year
- Top 10 Bitcoin-Only Exchanges
- The Ultimate Guide to Bitcoin Market Cap 2025: Top Strategies & Tips
- Bitcoin Trend 2025: 7 Powerful Strategies to Maximize Gains
- 10 Effective bitcoin investing tips for 2025: The Ultimate Guide to Boost Profits
Other Questions People Ask
What tactics are used by scammers to create a Blockworks clone site to drain crypto wallets?
Scammers have cloned the Blockworks website to deceive users into connecting their crypto wallets. They display fake news articles, such as a fabricated report about a multimillion-dollar exploit on Uniswap, to lure unsuspecting visitors. By redirecting users to a counterfeit Etherscan site, they trick them into revoking token approvals, ultimately leading to wallet draining. This method relies on social engineering tactics to exploit the trust users place in established crypto media outlets.
How can users protect themselves from scammers creating Blockworks clone sites?
To protect against scams involving Blockworks clone sites, users should verify the authenticity of URLs before clicking on links. Always check for secure connections (https) and look for official announcements from reputable sources regarding any news. Additionally, avoid connecting wallets to unfamiliar sites and be cautious of unsolicited messages or posts that prompt wallet interactions. Regularly updating security measures and using hardware wallets can also enhance protection against potential threats.
What should users do if they suspect they have interacted with a Blockworks clone site?
If users suspect they have engaged with a Blockworks clone site, they should immediately disconnect their wallets from any suspicious platforms. It is crucial to monitor wallet activity closely for unauthorized transactions and consider transferring assets to a secure wallet. Reporting the incident to relevant authorities and blockchain security firms can help mitigate further risks. Users should also educate themselves about phishing tactics to prevent future occurrences.
What are the signs of a phishing site mimicking Blockworks or other crypto platforms?
Signs of a phishing site that mimics Blockworks include misspellings in the URL, poor website design, and discrepancies in content compared to the official site. Users may also notice unusual prompts asking for wallet permissions or personal information that legitimate sites would not request. Additionally, if a site displays breaking news that seems sensational or too good to be true, it warrants further investigation. Always cross-check information with trusted sources before taking action.
How did scammers manage to create a Blockworks clone site so quickly?
Scammers were able to create a Blockworks clone site rapidly by registering the domain just days after launching their phishing campaign. This quick turnaround allowed them to capitalize on current events and trends within the crypto community, such as the fake Uniswap exploit. By leveraging compromised social media accounts to spread misinformation, they increased traffic to their fraudulent site. The speed and efficiency of these operations highlight the need for constant vigilance among crypto users.